Tim Starling wrote:
We can put other wikis in other colos. The small size
of the subsidiary
colos will limit their usefulness as a redundant backup if the Florida
colo goes down, but that's OK. We have to consider our goals. I think in
the worst case scenario of an extended failure of the Florida colo, a
reasonable goal is to expect:
* Read-only service after a few hours, using the other colos
* Limited (i.e. slow) read/write service a few hours after that
* Permanent data loss on the order of a few transactions
* Full read/write service after repair or replacement
Currently the main vulnerable points appear to be network and power, and
we've experienced problems with both in the last 6 months. I'm not an
expert on either, but I'm assured securing these services to a
reasonable degree is possible.
I would suggest suggest that any new major backup colo in North America
should be in a different power grid area. This would protect from the
possible consequences of a major blackout such as occurred in 2003. As
I understand the situation North America has two major power grids, one
in the East and one in the West. Only Texas and Quebec have independent
grids.
Ec